CVE-2018-19876 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-19876 Interim 1 26 2025-08-14T02:22:43Z current 2021-05-30T14:19:10Z 2025-08-14T02:22:43Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-19876 cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES for SAP Applications 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Desktop Applications 15 cairo cairo-32bit cairo-devel cairo-devel-32bit cairo-doc libcairo-gobject2 libcairo-gobject2-32bit libcairo-script-interpreter2 libcairo2 libcairo2-32bit cairo as a component of SLES for SAP Applications 11 SP3 libcairo-gobject2 as a component of SUSE Linux Enterprise Desktop 12 SP3 libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Desktop 12 SP3 libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Desktop 12 SP3 libcairo2 as a component of SUSE Linux Enterprise Desktop 12 SP3 libcairo2-32bit as a component of SUSE Linux Enterprise Desktop 12 SP3 cairo as a component of SUSE Linux Enterprise Desktop 12 SP3 libcairo-gobject2 as a component of SUSE Linux Enterprise Desktop 12 SP4 libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Desktop 12 SP4 libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Desktop 12 SP4 libcairo2 as a component of SUSE Linux Enterprise Desktop 12 SP4 libcairo2-32bit as a component of SUSE Linux Enterprise Desktop 12 SP4 cairo as a component of SUSE Linux Enterprise Desktop 12 SP4 cairo as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 cairo-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 libcairo-gobject2 as a component of SUSE Linux Enterprise Module for Basesystem 15 libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Module for Basesystem 15 libcairo2 as a component of SUSE Linux Enterprise Module for Basesystem 15 cairo as a component of SUSE Linux Enterprise Module for Basesystem 15 libcairo2-32bit as a component of SUSE Linux Enterprise Module for Desktop Applications 15 cairo as a component of SUSE Linux Enterprise Module for Desktop Applications 15 cairo as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata cairo as a component of SUSE Linux Enterprise Server 11 SP3 LTSS cairo as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata cairo as a component of SUSE Linux Enterprise Server 11 SP4-LTSS cairo-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS cairo-doc as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libcairo-gobject2 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libcairo2 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libcairo2-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS cairo as a component of SUSE Linux Enterprise Server 12 SP1-LTSS libcairo-gobject2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcairo2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcairo2-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS cairo as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcairo-gobject2 as a component of SUSE Linux Enterprise Server 12 SP3 libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Server 12 SP3 libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Server 12 SP3 libcairo2 as a component of SUSE Linux Enterprise Server 12 SP3 libcairo2-32bit as a component of SUSE Linux Enterprise Server 12 SP3 cairo as a component of SUSE Linux Enterprise Server 12 SP3 libcairo-gobject2 as a component of SUSE Linux Enterprise Server 12 SP4 libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Server 12 SP4 libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Server 12 SP4 libcairo2 as a component of SUSE Linux Enterprise Server 12 SP4 libcairo2-32bit as a component of SUSE Linux Enterprise Server 12 SP4 cairo as a component of SUSE Linux Enterprise Server 12 SP4 libcairo-gobject2 as a component of SUSE Linux Enterprise Server 12-LTSS libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Server 12-LTSS libcairo2 as a component of SUSE Linux Enterprise Server 12-LTSS libcairo2-32bit as a component of SUSE Linux Enterprise Server 12-LTSS cairo as a component of SUSE Linux Enterprise Server 12-LTSS cairo as a component of SUSE Linux Enterprise Server for SAP Applications 12 libcairo-gobject2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libcairo2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libcairo2-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 cairo as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libcairo-gobject2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libcairo-gobject2-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libcairo-script-interpreter2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libcairo2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libcairo2-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 cairo as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 cairo-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 cairo-devel-32bit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 cairo-doc as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 cairo as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 cairo-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 cairo as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 cairo-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 cairo as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error. CVE-2018-19876 SLES for SAP Applications 11 SP3:cairo SUSE Linux Enterprise Desktop 12 SP3:cairo SUSE Linux Enterprise Desktop 12 SP3:libcairo-gobject2 SUSE Linux Enterprise Desktop 12 SP3:libcairo-gobject2-32bit SUSE Linux Enterprise Desktop 12 SP3:libcairo-script-interpreter2 SUSE Linux Enterprise Desktop 12 SP3:libcairo2 SUSE Linux Enterprise Desktop 12 SP3:libcairo2-32bit SUSE Linux Enterprise Desktop 12 SP4:cairo SUSE Linux Enterprise Desktop 12 SP4:libcairo-gobject2 SUSE Linux Enterprise Desktop 12 SP4:libcairo-gobject2-32bit SUSE Linux Enterprise Desktop 12 SP4:libcairo-script-interpreter2 SUSE Linux Enterprise Desktop 12 SP4:libcairo2 SUSE Linux Enterprise Desktop 12 SP4:libcairo2-32bit SUSE Linux Enterprise High Performance Computing 12 SP4:cairo SUSE Linux Enterprise Module for Basesystem 15:cairo SUSE Linux Enterprise Module for Basesystem 15:cairo-devel SUSE Linux Enterprise Module for Basesystem 15:libcairo-gobject2 SUSE Linux Enterprise Module for Basesystem 15:libcairo-script-interpreter2 SUSE Linux Enterprise Module for Basesystem 15:libcairo2 SUSE Linux Enterprise Module for Desktop Applications 15:cairo SUSE Linux Enterprise Module for Desktop Applications 15:libcairo2-32bit SUSE Linux Enterprise Server 11 SP1 for Teradata:cairo SUSE Linux Enterprise Server 11 SP3 LTSS:cairo SUSE Linux Enterprise Server 11 SP3 for Teradata:cairo SUSE Linux Enterprise Server 11 SP4-LTSS:cairo SUSE Linux Enterprise Server 11 SP4-LTSS:cairo-32bit SUSE Linux Enterprise Server 11 SP4-LTSS:cairo-doc SUSE Linux Enterprise Server 12 SP1-LTSS:cairo SUSE Linux Enterprise Server 12 SP1-LTSS:libcairo-gobject2 SUSE Linux Enterprise Server 12 SP1-LTSS:libcairo-gobject2-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:libcairo-script-interpreter2 SUSE Linux Enterprise Server 12 SP1-LTSS:libcairo2 SUSE Linux Enterprise Server 12 SP1-LTSS:libcairo2-32bit SUSE Linux Enterprise Server 12 SP2-LTSS:cairo SUSE Linux Enterprise Server 12 SP2-LTSS:libcairo-gobject2 SUSE Linux Enterprise Server 12 SP2-LTSS:libcairo-gobject2-32bit SUSE Linux Enterprise Server 12 SP2-LTSS:libcairo-script-interpreter2 SUSE Linux Enterprise Server 12 SP2-LTSS:libcairo2 SUSE Linux Enterprise Server 12 SP2-LTSS:libcairo2-32bit SUSE Linux Enterprise Server 12 SP3:cairo SUSE Linux Enterprise Server 12 SP3:libcairo-gobject2 SUSE Linux Enterprise Server 12 SP3:libcairo-gobject2-32bit SUSE Linux Enterprise Server 12 SP3:libcairo-script-interpreter2 SUSE Linux Enterprise Server 12 SP3:libcairo2 SUSE Linux Enterprise Server 12 SP3:libcairo2-32bit SUSE Linux Enterprise Server 12 SP4:cairo SUSE Linux Enterprise Server 12 SP4:libcairo-gobject2 SUSE Linux Enterprise Server 12 SP4:libcairo-gobject2-32bit SUSE Linux Enterprise Server 12 SP4:libcairo-script-interpreter2 SUSE Linux Enterprise Server 12 SP4:libcairo2 SUSE Linux Enterprise Server 12 SP4:libcairo2-32bit SUSE Linux Enterprise Server 12-LTSS:cairo SUSE Linux Enterprise Server 12-LTSS:libcairo-gobject2 SUSE Linux Enterprise Server 12-LTSS:libcairo-gobject2-32bit SUSE Linux Enterprise Server 12-LTSS:libcairo2 SUSE Linux Enterprise Server 12-LTSS:libcairo2-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP2:cairo SUSE Linux Enterprise Server for SAP Applications 12 SP2:libcairo-gobject2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libcairo-gobject2-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP2:libcairo-script-interpreter2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libcairo2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libcairo2-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:cairo SUSE Linux Enterprise Server for SAP Applications 12 SP4:libcairo-gobject2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libcairo-gobject2-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:libcairo-script-interpreter2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libcairo2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libcairo2-32bit SUSE Linux Enterprise Server for SAP Applications 12:cairo SUSE Linux Enterprise Software Development Kit 11 SP4:cairo SUSE Linux Enterprise Software Development Kit 11 SP4:cairo-devel SUSE Linux Enterprise Software Development Kit 11 SP4:cairo-devel-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:cairo-doc SUSE Linux Enterprise Software Development Kit 12 SP3:cairo SUSE Linux Enterprise Software Development Kit 12 SP3:cairo-devel SUSE Linux Enterprise Software Development Kit 12 SP4:cairo SUSE Linux Enterprise Software Development Kit 12 SP4:cairo-devel moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H